Quantum Hashing with the Icosahedral Group 
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We study an efficient algorithm to hash any single qubit gate (or unitary matrix) into a braid of Fibonacci 
anyons represented by a product of icosahedral group elements. By representing the group elements by braid 
segments of different lengths, we introduce a series of pseudo- groups. Joining these braid segments in a renor- 
malization group fashion, we obtain a Gaussian unitary ensemble of random-matrix representations of braids. 
With braids of length 0(log^(l/e)), we can approximate all SU(2) matrices to an average error e with a cost 
of 0(log(l/e)) in time. The algorithm is applicable to generic quantum compiling. 
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Quantum gates are the building blocks for quantum circuits. 
A reliable implementation of quantum computation would 
need a universal set of fault-tolerant gates. How to use the 
set of universal gates to construct quantum circuits is an im- 
portant question The question also arises if we want to 
simulate the circuits of the universal set by using those of an- 
other set. The Solovay-Kitaev algorithm [2] guarantees good 
approximations to any desired gates, provided that a dense 
enough e-net exists. Instead of using quantum error-correction 
codes, topological quantum computation isj-lztl proposes to re- 
alize fault-tolerant quantum gates by topology embedded in 
hardware. In two-dimensional topological states of matter, a 
collection of non-Abelian anyonic excitations with fixed po- 
sitions spans a multi-dimensional Hilbert space and, in such a 
space, the quantum evolution of the multi-component wave 
function of the anyons is realized by their braidings. The 
evolution can be represented by non-trivial unitary matrices 
that implement quantum computation. A prototype of non- 
Abelian anyons is known as the Fibonacci anyons, which ex- 
ist in the Read-Rezayi quantum Hall state at filling fraction 
i/ = 3/5 liSJ (whose particle-hole conjugate is a candidate for 
the observed v = 12/5 quantum Hall plateau_||9l]) and in the 
non-Abelian spin-singlet state ?A v = 4/7 [lO]. In topologi- 
cal quantum computation, the topology of the quantum braids 
precludes errors induced by local noises; unfortunately, this 
does not eliminate the errors in approximating quantum gates 
by braids. 

Bonesteel et al. pioneered the implementation of quantum 
gates usingFibonacci anyons with a brute-force search algo- 
rithm idllH], which finds the best approximation to a unitary 
matrix T in the set of all braids up to a certain length L. As for 
all quantum computation schemes, the complexity (thus inef- 
ficiency) in brute-force search is dictated by the necessity to 
sample the whole space of unitary matrices with almost equal 
weight, while the target gate is just a zero-measure point in- 
side. Thus the distance lfl4ll of the approximation depends 
on L as e'^l^ (with ^ ~ 7.3 11311 ). However, the run time 



grows exponentially in L, rendering the algorithm impractical 
to achieve a distance below a certain threshold. In fact, the 
most probable braids generated by the brute-force algorithm 
have the largest distance to the desired gate due to the geom- 
etry of the unitary matrix space ifTill . as illustrated in Fig. [T] 
Subsequent algorithms |fl3l [isl] enhance the sampling of the 
target point by mapping it to a higher-dimensional object, al- 
though the search remains time-consuming. The inefficiency 
in these algorithms is also reflected in the fact that a new uni- 
tary matrix needs a new brute-force search, which is expo- 
nentially hard. The existing implementation of the Solovay- 
Kitaev algorithm 1.1 61 is not efficient enough in terms of either 
braid length or searching time. 

The question is thus the following: can one implement a 
more efficient search algorithm to find braids for single-qubit 
gates? Technically, we can think of a braid as an index to the 
coiTesponding unitary matrix, which can be regarded as a def- 
inition, like in a dictionary. Given an index, it is straightfor- 
ward to find its definition, but finding the index for a definition 
is exponentially hard. In computer science, the task of quickly 
locating a data record given its content (or search key) can be 
achieved by the introduction of hash functions. In the con- 
text of topological quantum computation, we thus name this 
task topological quantum hashing. In general, such a hash- 
ing function, being imperfect, still maps a unitary matrix to a 
number of braids rather than one. But narrowing the search 
down to only a fixed (rather than exponentially large) number 
of braids is already a great achievement. 

In this Letter, we explore topological quantum hashing with 
the finite icosahedral group I and its algebra. The building 
blocks of the algorithm are a preprocessor and a main pro- 
cessor, the aim of the preprocessor is to give an initial ap- 
proximation T of the target gate T, while that of the main 
processor is to reduce the discrepancy between T and T with 
extremely high efficiency. We discuss the iteration of the algo- 
rithm in a renormalization group fashion and the results which 
follow from this approach. The algorithm is also applicable to 
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FIG. 1: (color online) Probability distribution of distance d 1 14] to 
the targeted identity matrix in the set of nontrivial braids that one 
samples in different algorithms. PBF(d) of the brute-force search 
(red solid squares) roughly follows (4/7r)d^/ sjl — {d/2Y, reflect- 
ing the three-sphere nature of the unitary matrix space (three in- 
dependent parameters apart from an unimportant phase). In the 
pseudo icosahedral group approach (n = 4), distributions for L — 
8 (Ps, black empty circles) and L — 24 (P24, blue solid tran- 
gles) agree very well with the energy-level-spacing distribution of 
the unitary Wigner-Dyson ensemble of random matrices, Pl {d) — 

(32/7r2)(dV4)e"'*''''"''/''^'^ PL{d) differ only by their corre- 
sponding average (not a fitting parameter), which decays expo- 
nentially as L increases. Note P24{d) is roughly ten-times sharper 
and narrower than Ps (d) . 



generic quantum compiling and, remarkably, its efficiency can 
be quantified using random matrix theory. 

We illustrate our algorithm with Fibonacci anyons (denoted 
as (j), with a fusion rule cj) x (p — 1 + cf), where 1 is the vac- 
US. 



uum) liMlllSllMl. If we create two pairs of <j) (illustrated 
graphically by dots) out of the vacuum, both pairs (small el- 
lipses) must have the same fusion outcome, 1 or (j), forming a 
qubit (large ellipse), in which the braiding of (p's can be gen- 
erated by two fundamental braiding matrices 
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and their inverses <t^^, <J^^- Here r = (Vs — l)/2. The 
matrix representation generates a four-strend braid group 
(or an equivalent three-strand braid group B^): this is an in- 
finite dimensional group consisting of all possible sequences 
of length L of the above generators and with increasing L 
the whole set of braidings generates a dense cover of the 
SU(2) single-qubit rotations. Earlier works ifTTl [H fll lTell 
have demonstrated that the two-qubit gate construction can be 
mapped to the single-qubit gate construction; thus, we will not 
discuss the construction of two-qubit gates here. 
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FIG. 2: (color online) Approximation to the —iX gate (an element 
of the icosahedral group) in terms of braids of the Fibonacci anyons 
of length L = 24 in the graphic representation. In this example the 
error is 0.0031. 



Icosahedral group. The icosahedral rotation group I of or- 
der 60 is the largest finite subgroup of SU(2) excluding reflec- 
tion. Therefore, it has been often used to replace the full SU(2) 
group for practical purposes, as for example in earlier Monte 
Carlo studies of SU(2) lattice gauge theories [17], and this mo- 
tivated us to apply the icosahedral group representation in the 
braid construction. I is composed by the 60 rotations around 
the axes of symmetry of the icosahedron (platonic solid with 
twenty triangular faces) or of its dual polyhedron, the dodeca- 
hedron (regular solid with twelve pentagonal faces); there are 
six axes of the fifth order, ten of the third and fifteen of the 
second. Let us for convenience write I = {go, gi, 959}, 
where go = e is the identity element. 

Thanks to the homomorphism between SU(2) and 50(3), 
we start by associating a 2 x 2 unitary matrix to each group 
element. In other words, each group element can be ap- 
proximated by a braid of Fibonacci anyons of a certain 
length N using the brute-force search [ 1 1,] and neglecting 
an overall phase. In this way, we obtain an approximate 
representation in SU(2) of the icosahedral group, I{N) — 
{go{N), gi{N), . . . ,g^g{N)}. Choosing, for instance, a fixed 
braid length of = 24, the distance (or error) of each braid 
representation to its corresponding exact matrix representa- 
tion varies from 0.003 to 0.094 (see Fig.|2]for an example). 

We point out that the 60 elements of i{N) (for any finite 
N) do not close any longer the composition laws of I; in fact, 
they form a pseudo-group, not a group, isomorphic to I only 
in the limit — > 00. In other words, if the composition law 
gigj = gk holds in the original icosahedral group, the prod- 
uct of the corresponding elements gi{N) and gj{N) is not 
gk{N), although it can be very close to it for large enough N. 
Interestingly, the distance between the product gi{N) gj{N) 
and the corresponding element gk of I can be linked to the 
Wigner-Dyson distribution, which we will discuss later 

Using the pseudo-group structure of I, we can generate a 
set S made of a large number of braids only in the vicinity 
of the identity matrix: this is a simple consequence of the 
original icosahedral group algebra, in which the composition 
laws allow us to obtain the identity group element in various 
ways. The set S is instrumental to achieve an important goal, 
i.e. to search among the elements of S the best correction 
to apply to a first rough approximation of the target single- 
qubit gate T we want to hash. We can create such a set, la- 
beled by S{L, n), considering all the possible ordered prod- 
ucts gi^{L)gi^{L) . . .gi^{L) of n > 2 elements of I{L) of 
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FIG. 3: (color online) The graphic representation of the braid approximating the target gate iZ in the icosahedral group approach with a 
preprocessor of Z = 8 and m = 3 and a main processor of L = 24 and n = 3. To emphasize the structure, we skip the explicit braid sequence 
but mark the segments only, among which gpi3p25p3 ~ iZ and gqigq2gqi ~ Oql up to a phase. The braid (with a reduced length of 98 due 
to accidental cancellations where the component braids connect) has an error of 0.00099 H8i1 . 



length L and multiplying them by the matrix gi^j_^{L) e i{L) 
such that .gi„^i = g^'^ . . . g^^g^^- In this way we generate all 
the possible combinations of n + 1 elements of I whose re- 
sult is the identity, but, thanks to the errors that characterize 
the braid representation I, we obtain 60" small rotations in 
SU(2), corresponding to braids of length [n + 1)L. 

The hashing procedure. The first step in the hashing proce- 
dure of the target gate is to find a rough braid representation 
of T using a preprocessor, which associates to T the element 
in [Z (Z)]'" (of length m x I) that best approximates it. Thus 
we obtain a starting braid 

ro"=5,, (05j.(0---ff.™(0 (3) 

characterized by an initial error we want to reduce. The pre- 
processor procedure relies on the fact that choosing a small I 
we obtain a substantial discrepancy between the elements g of 
the icosahedral group and their representatives g. Due to these 
random errors the set [!(/)] ™ of all the products (jj-^gj^ ■ ■ ■ gj^ 
is well spread all over SU(2) and can be considered as a ran- 
dom discretization of this group. 

In the main processor we use the set of fine rotations 
S{L,n) to efficiently reduce the error in Tq'"\ Multiplying 
Tq'™ by all the elements of S{L, n), we generate 60" possi- 
ble braid representations of T : 

To'"'gtJt2---gt„gt„+i (4) 

Among these braids of length (n + l)L + ml, we search the 
one which minimizes the distance with the target gate T. This 
braid, T^'™, is the result of our algorithm. Fig. |4] shows the 
distribution of final errors for 10,000 randomly selected target 
gates obtained with a preprocessor of Z = 8 and rn = 3 and a 
main processor of L — 24 and n — 3. 

To illustrate our algorithm, it is useful to consider a concrete 
example: suppose we want to find the best braid representa- 
tion of the target gate 

T = .Z.(; 0^) (5) 

Out of all combinations in [1(8)]'^, the preprocessor selects 
a Tg'"^ = ffpi (8)5p2 (8)5p3 (8), which minimizes the dis- 
tance to T to 0.038. Applying now the main processor, 
the best rotation in 5(24, 3) that corrects Tq '"^ is given by 



a 3gi (24)5?. (24)5,^)5,, (24), where g,, = 9q^^9q^^9q^- 
The resulting braid OlSll is then represented by 

- 9p^ mp. (8)5p3 (8)5g: (24)g,, (24)g,3 (24)g,, (24) 

/-0.0004+l.OOOOi -0.0007 - 0.0005A 4„ 
~ 0.0007- 0.0005i -0.0004- l.OOOOiy ^ ' 

for the special set of p's and g's and, apart from an overall 
phase, the final distance is reduced to 0.00099 (Fig.[3]l. 

Relationship with random matrix theory. The distribution 
of the distance between the identity and the so-obtained braids 
has an intriguing connection to the Gaussian unitary ensemble 
of random matrices, which helps us to understand how close 
we can approach the identity in this way, i.e. the efficiency 
of the hashing algorithm. Let us analyze the group property 
deviation for the pseudo-group I{N) for braids of length N . 
One can write gi = giC*'^', where is a Hermitian matrix, 
indicating the small deviation of the finite braid representation 
to the corresponding SU(2) representation for an individual 
element. For a product of gi that approximate gigj ■ ■ ■ gn+i = 
e, one has 

gfg, ■ ■ ■ = <?.e'^'5je^^' ' ' ' 5n+ie'^"+^ = e*^" , (7) 
where i7„, related to the accumulated deviation, is 

Hn = gtl^tgi^ + gigjAjgJ^gr^ + ■■■ 
+ g,gj ■ ■ ■ g„A„g-i • • • gj^g-^ + A„+i + ©(A^). (8) 

The natural conjecture is that, for a long enough sequence of 
matrix product, the Hermitian matrix tends to a random 
matrix corresponding to the Gaussian unitary ensemble. This 
is plausible as Hn is a Hermitian matrix that is the sum of 
random initial deviation matrices with random unitary trans- 
formations. A direct consequence is that the distribution of 
the eigenvalue spacing s obeys the Wigner-Dyson form Iil9i1 . 

So \So J 

where sq is the mean level spacing. For small enough de- 
viations, the distance of iJ„ to the identity, (i(l,e*^") — 
\\Hn\\ + O (IliJnll"^), is proportional to the eigenvalue spac- 
ing of H and, therefore, should obey the same Wigner-Dyson 
distribution. The conjecture above is indeed well supported 
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FIG. 4: Probability distribution of d in 10,000 random tests using the 
icosahedral group approach with a preprocessor of Z = 8 and m = 3 
and a main processor of L = 24 and n = 3. The total length of the 
braids (neglecting accidental cancellations when component braids 
connect) is 120. The trend agrees with the unitary Wigner-Dyson 
distribution (solid line) with an average error 7.1 x 10"'*. 

by our numerical analysis, even for n as small as 3 or 4 (see 
Fig-EJ- One can show that the final error of T|'™ also follows 
the Wigner-Dyson distribution (as illustrated in Fig. |4]i with 
an average final distance / ~ 60^^"^ /^/r^+T times smaller 
than the average error of Tq'"\ where the factor 60 is given 
by the order of the icosahedral group. With a smaller finite 
subgroup of SU(2), we would need a greater n to achieve the 
same reduction. 

Conclusions. In this paper we have demonstrated that the 
problem of compiling an arbitrary SU(2) qubit gate T in terms 
of Fibonacci anyons can be solved efficiently by using hashing 
functions based on the 60 elements of the icosahedral group 
I and their composition laws. Our procedure can be gener- 
alized to other anyonic models, different quantum computa- 
tional schemes, and in principle to multi-qubit gates. 

The hashing algorithm uses a light brute-force search up to 
L = 24 to initialize the 60 elements of I with an average 
precision of about 0.02. The remaining search operations are 
based on the composition laws of the group I, which do not 
need any longer to exhaust the exponentially growing number 
of possibilities as L increases. Indeed, it takes less than a 
second on a 3 GHz Intel E6850 processor to reach an average 
precision of 7.1 x 10~^ (Fig.|4]l for an arbitrary gate 1 18]. 

We can further improve the precision with additional itera- 
tions in the main processor, as we move exponentially down 
in error scales in a renormalization group fashion. For that 
we need longer braid representations of I, which must be ob- 
tained separately, e.g., by the brute-force search, and can be 
stored for all future uses. It follows that q iterations reduce the 
average error by f within a run time linear in q. To achieve 
an error smaller than a given e, one needs q ^ log(l/e) con- 
secutive iterations. Therefore, the run time grows as T ^ 
log(l/£), better than the poly-logarithmic time of the efficient 



implementation of the Solovay-Kitaev algorithm 1*2^. The 
iterative hashing algorithm generates a final braid of length 
0(log^(l/e)), competing favorably with_the results of other 
efficient quantum compiling algorithms [1, 20]. We hope that 
the quantum hashing algorithm, with potential improvements 
and hybridizations with other algorithms, introduces a new di- 
rection for efficient quantum compiling. 
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During the write-up of this Letter, we noticed a recent pa- 
per ^2X\ which discusses a geometrical approach with binary 
polyhedral groups. 
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